CT-CRM ("we", "our", "us") values your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Customer Relationship Management (CRM) application.

1. Information We Collect

We collect and process the following types of information:

• Organizational Data: Each organization using CT-CRM operates within its own secure, isolated database.
• Customer Information: Authorized users within an organization may add customers with details including:
  • Full name and contact information
  • Product currently being used
  • Reference and relationship data
  • Address Book entries
  • Bank account details (for invoicing or relationship tracking)
• User Login Data: We store login credentials securely to manage user access and permissions.
• Call Log Access: If explicitly granted, we access call logs to enrich customer interaction history and improve context for communication tracking within the CRM dashboard.

2. How We Use Your Information

• To manage and operate your organization’s CRM environment
• To allow authorized personnel to create and manage customer profiles
• To display relevant phone activity data (only if access is granted)
• To ensure secure authentication and user access control
• To improve our services and enhance application functionality

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Your consent (e.g., for call log access)
• Performance of a contract (e.g., CRM service delivery)
• Legitimate interests (e.g., application security and optimization)

4. Data Sharing and Disclosure

We do not sell or rent personal information. Data may be shared only:

• With your organization’s authorized users
• When required by applicable law or legal process
• With third-party service providers under strict confidentiality agreements (if any)

5. Data Security

We implement technical and organizational measures to safeguard your data, including data encryption, access control, and secure hosting environments.

6. Data Retention

We retain your data as long as necessary for the purposes stated in this policy, or as required by law. Organizations can request deletion or export of their data at any time.

7. Your Rights

You have the right to:

• Access and review your personal data
• Request correction or deletion of your information
• Withdraw consent for call log access at any time
• File a complaint with a data protection authority, if applicable

You can manage or revoke call log access permissions at any time through your device settings or by contacting your organization’s administrator.

8. Justification for Call Log Data Access

Access to call log data is requested solely to enhance your organization's ability to engage with customers more effectively. Specifically, this information is used to:

• Identify recent interactions between team members and customers
• Enable real-time insights into client communication trends
• Provide better context for customer service, follow-ups, and account management

This data is never used for advertising, sold to third parties, or used outside of the context of improving your CRM workflow. Access to call logs is:

• Strictly permission-based – the app will only access call logs if you explicitly grant permission
• Visible only to authorized users within your organization
• Processed and stored securely following industry-standard encryption and access control policies

You may withdraw this permission at any time via your device settings or by contacting your administrator.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. The latest version will always be available within the application and on our website.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at:

Email: support@ct-crm.example.com